6920f65f343dea04cb8686636031f98fdc2779dad7722a4d1d8c9cb74d5ad0eb | Triage

Sharing

General

Target

6920f65f343dea04cb8686636031f98fdc2779dad7722a4d1d8c9cb74d5ad0eb
Size

315KB
Sample

221002-kh6zbshafq
MD5

71166816b48fe62fb4830f0f33e32a50
SHA1

eb53e7c89ebde6ea122ebb331e2bce4b3376c48a
SHA256

6920f65f343dea04cb8686636031f98fdc2779dad7722a4d1d8c9cb74d5ad0eb
SHA512

be21fdd037c3ebf687d415690c736da541c88f9666414bb3c20bfe6356699770c2477ca546632ac9f0684b66bdb2246394a5f6b6978cd17e380c24b74db407af
SSDEEP

6144:br3bUzkuvcBYC47l2xiFjox21H9mbWnqnHB/Jc9BItkszgx4ygDj:brckuveY3fFj4ThVkszC4y2

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  6920f65f343dea04cb8686636031f98fdc2779dad7722a4d1d8c9cb74d5ad0eb
- Size
  
  315KB
- MD5
  
  71166816b48fe62fb4830f0f33e32a50
- SHA1
  
  eb53e7c89ebde6ea122ebb331e2bce4b3376c48a
- SHA256
  
  6920f65f343dea04cb8686636031f98fdc2779dad7722a4d1d8c9cb74d5ad0eb
- SHA512
  
  be21fdd037c3ebf687d415690c736da541c88f9666414bb3c20bfe6356699770c2477ca546632ac9f0684b66bdb2246394a5f6b6978cd17e380c24b74db407af
- SSDEEP
  
  6144:br3bUzkuvcBYC47l2xiFjox21H9mbWnqnHB/Jc9BItkszgx4ygDj:brckuveY3fFj4ThVkszC4y2
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2